Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: Eo1+UpOo8vrq+DkQ86tDCGYtpAlO54Q5fcu2sM/kAlA=
Subject key identifier: 3B:B0:57:E8:2E:CD:BE:DA:BD:6C:BA:EF:6D:F2:4C:2D:DA:F3:5B:4A
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 019D26CCD3C0055D25F957F805672A423A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: LyQJZOiJBFj_CkncEm0AMCx8VkA.roa (hash: 0nBIH73/4Jum7OxlljaMAAXDP5B7wTyLZnA+y+yJXE4=)
2: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: 1FwzZh8nOhX3EHW52uXczs/wX4QkljZsuaxWXvqMRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d3:c0:05:5d:25:f9:57:f8:05:67:2a:42:3a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=3bb057e82ecdbedabd6cbaef6df24c2ddaf35b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:3d:6b:0b:5a:09:a9:6c:84:66:eb:42:f0:
bc:ee:30:f2:4a:f7:b1:67:e5:1d:92:f4:46:01:4e:
05:6e:20:82:6c:c3:68:91:5b:f5:42:dc:d8:56:9d:
22:3a:e6:ff:99:21:04:60:f5:9d:e7:17:d9:a0:88:
83:8e:df:39:8a:31:7d:1a:cc:13:e0:9b:90:0a:98:
57:69:1e:85:1c:bd:48:6f:f5:35:a1:89:ed:ed:c4:
0c:93:9e:eb:26:c0:bd:1e:0c:b4:6c:8f:3e:07:68:
c3:68:b7:57:ff:bd:1b:12:1f:48:91:56:74:05:8d:
27:3d:bc:99:87:19:53:bb:9e:f9:5a:c7:9a:0e:fb:
17:b0:ec:83:46:97:ff:36:28:c2:56:bf:87:5d:b7:
79:ae:1f:2d:d2:61:ab:f1:47:bd:b3:75:17:0b:72:
88:35:a9:76:5f:2b:1a:16:43:54:f5:59:71:b1:31:
b7:db:63:73:2a:e5:4b:d9:ef:fb:d9:5a:fc:1a:6e:
52:23:3b:1d:ea:62:f4:43:30:a0:d0:33:89:dc:30:
a4:97:5d:55:6e:57:c7:4d:07:04:3e:93:06:ce:5b:
58:0f:11:17:a9:0a:c9:d4:74:c3:fb:b4:f6:30:8d:
45:68:ed:4a:dc:1c:c8:94:e4:f6:cf:0b:cb:9c:74:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B0:57:E8:2E:CD:BE:DA:BD:6C:BA:EF:6D:F2:4C:2D:DA:F3:5B:4A
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:21:fb:f9:e6:12:29:c2:11:90:d1:6c:c5:1a:6e:bf:45:d9:
d3:23:97:cd:0e:dc:1a:80:62:3a:d6:42:be:c9:ee:e0:b2:d4:
26:fa:60:98:91:64:0f:1e:d7:38:f4:a7:6c:0c:40:27:af:b0:
04:59:3c:e0:f2:7d:e7:08:e0:3f:c4:21:c5:d5:cd:d4:b6:90:
3a:80:06:4c:66:2a:da:2f:49:c8:70:48:33:b3:d8:51:42:6e:
df:f3:c3:46:e0:4c:3b:39:a6:dc:f2:a0:12:ac:e8:50:17:5a:
d0:46:d3:a5:8e:7d:39:0f:0c:e9:22:b7:69:f6:f2:30:90:1e:
d5:10:0c:2f:e5:48:ac:a0:b5:84:9c:e4:9a:48:4d:17:e6:1f:
68:79:33:95:03:84:21:23:a4:79:7b:28:a6:f4:4e:2a:48:6b:
6b:0d:ca:a5:33:48:c7:26:4f:52:2a:c6:42:95:0c:94:8c:48:
9b:21:20:55:ac:d0:ca:68:91:dc:e7:a9:91:45:7f:09:b7:f0:
23:4b:98:df:19:55:fd:8f:f8:6b:96:81:da:b2:b2:75:7a:c7:
ed:d1:23:cc:c0:e1:0d:3e:15:ed:6d:13:f7:98:2b:b9:ed:3e:
35:a6:de:7b:7b:32:77:e9:1b:1e:7c:a6:f4:68:48:f9:cc:2a:
b4:d6:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:32 2026 by rpki-client